This section contains all configuration settings relating to application usage. Specify whether applicaton usage data files are compressed before being uploaded. Specify whether the applicaton usage agent is inactive on this managed device. Whether to enable logging of individual sessions. Whether to enable the usage agent's internal upload. If this is disabled, the schedule agent can still perform uploads. Specify the processing priority used for application usage agent. Specify the default priority for Manual Mapper entries. Other data sources use 10. Higher values take priority when multiple products point to a file or directory. Specify the minimum time that an application must run for before application usage data will be recorded. Specify how often the application usage agent will refresh its setttings from the registry. Specify how often the application usage agent checks for new applications running. Specify how often the application usage agent refreshes its list of applications to be monitored. Specify how often the application usage agent caches recorded data locally. Specify how often the usage agent should upload recorded data. Specify how long the usage agent should wait before starting. Useful for decreasing the user's time to an interactive desktop. Specify the directory into which the application usage agent should store its recorded data. Specify whether the application usage agent should monitor applications found in Add/Remove programs. Specify whether the application usage agent should monitor applications found in the Manual Mapper registry keys. Specify whether the application usage agent should monitor applications found in the ManageSoft application cache. Specify whether the application usage agent should monitor applications found in Windows Installer. Specify whether the application usage agent should only monitor applications that are executed by a logged in user. Specify ManageSoft managed applications that are not monitored when recording application usage data. Specify applications installed by Windows Installer that are not monitored when recording application usage data. This section contains all configuration settings relating to application usage logging. Specify the name of the file to store logging information. Specify the name of the file to store additional logging information. Specify the maximum log file size. Specify the level of logging used by application usage agent. This section contains configuration settings applicable to all agents unless overridden by settings in each agent. Specify the machine name to be used to retrieve machine policy. Specify the user name to be used to retrieve user policy. Specify whether ManageSoft should create event logs. Specify the domain name of the managed device. Specify the domain name of user. Specify alternate registry hive. Specify the alternate registry hive. Specify the URL that contains installation preferences. Specify whether options set on the command line override fixed preferences in the registry or network preference file. This section contains common configuration settings relating to networking. Specify whether ManageSoft operates in peer-to-peer mode. Specify whether ManageSoft obeys the configured networking time windows. Specify time windows for connections to distribution servers. Specify time windows for connections to peer managed devices. Specify the minimum time (in seconds), during which no peer may be using the parent connection, before a "when connected to network" event can be triggered again Specify the time period (in seconds) after successfully checking for updated policy (.NPL) files during which ManageSoft will not attempt to update those files again. Specify the time period (in seconds) after successfully checking for updated package (.OSD) files in policy during which ManageSoft will not attempt to update those files again. Specify the length of time in seconds of inactivity after which a network operation will time out. Specify the maximum percentage of bandwidth that ManageSoft uses for uploads and downloads on a high-speed connection. Specify the maximum percentage of bandwidth that ManageSoft uses for uploads and downloads on a low-speed connection. Specify whether ManageSoft should perform its normal network checks. This section contains all configuration settings relating to security. Specify whether ManageSoft checks certificate revocation list when accepting web server signatures from an HTTPS server. Specifies whether the ManageSoft agents perform security analysis based on data in mssecure.xml. This section contains all configuration settings relating to user interaction. Specify whether ManageSoft displays an icon in the system tray. Specify the level of user interaction. Specify whether user interface should be displayed when applying machine policy. This section contains all configuration settings relating to installation agent. Specify the number of times the installation agent should try to connect to the distribution server. Specify the proxy url to be used by the installation agent. Specify whether Managesoft returns an error when upgrades or self-heal operations fail. Specify the amount of disk space to reserve on each drive. Specify the outcome when an end-user does not (or cannot) decide whether to postpone the installation of mandatory packages. Specifies whether the ManageSoft installation agent performs security analysis based on data in mssecure.xml. Specify whether the installation agent detects and fails differing versions of single application. Specifies whether the Installation Agent should return a failure code if any package fails to be installed. This section contains all configuration settings relating to Add/Remove. Specify whether ManageSoft should brand add/remove program entries. Specify whether installed packages create an entry in Add/Remove programs. Specify whether external installer package details can be modified in Add/Remove programs. Specify whether external installer packages can be uninstalled via the Windows Add/Remove programs applet. This section contains all configuration settings relating to bandwidth settings. Specify the number of times a failed network operation is retried before an alternative download location is attempted. Specify whether ManageSoft should perform its normal network checks. Specify the minimum network speed (bits per second) for ManageSoft to initiate a check for updates. Specify the bytes per second at which the managed device accesses data over the network. This setting is not used if the NetworkSpeed setting can be determined and the NetworkHighSpeed is set to a non-zero value. Specify the lowest network speed (in bits per second) that Managesoft will consider to be a high speed network connection to a server. Specify the maximum percentage of bandwidth that ManageSoft uses for uploads and downloads on a high-speed connection. Specify the maximum Network High Usage value that can be set for a managed device by end-user moving the bandwidth usage slider control in the installation agent. Specify the minimum Network High Usage value that can be set for a managed device by end-user moving the bandwidth usage slider control in the installation agent. Specify the maximum percentage of bandwidth that ManageSoft uses for uploads and downloads on a low-speed connection. Specify the length of time in seconds of inactivity after which a network operation will time out. Specify the maximum NetworkLowUsage value that can be set for a managed device by and end-user moving the bandwidth usage slider control in the installation agent. Specify the minimum NetworkLowUsage value that can be set for a managed device by and end-user moving the bandwidth usage slider control in the installation agent. This section contains all configuration settings relating to byte-level differencing. Specify whether ManageSoft should use dynamic byte-level differencing when downloading files in the package. Specify the maximum network connection speed (in bytes per second) at which byte-level differencing for file downloads is disabled. This section contains all configuration settings relating to CPU. Specify the processing priority used for ManageSoft processes. This section contains all configuration settings relating to file handling. Specify whether files are downloaded directly to their destination folder or a staging area. Specify whether inactive packages are staged before installation occurs. Specify whether deletion of redundant files in the Windows system folder is allowed. This section contains all configuration settings relating to file handling. Specify the name of the file to store logging information. Specify the name of the file to store additional logging information. Specify the maximum log file size. Specify the level of logging used by installation agent. This section contains all configuration settings relating to installation event logging. Specify whether ManageSoft should create installation event logs. Specify whether ManageSoft should create installation success events. Specify whether ManageSoft should create installation failure events. Specify whether ManageSoft should create uninstallation success events. Specify whether ManageSoft should create uninstallation failure events. Specify whether ManageSoft should re-create installation events when checking packages. Specify whether ManageSoft should re-create installation not required events when checking packages. Specify how often ManageSoft should re-create installation events for not required packages. Specify whether ManageSoft should upload installation event logs immediately after installation. This section contains all configuration settings relating to MSI package processing. Specify whether repairs are performed at the same time as ManageSoft self-healing operations. Specify what will be repaired. Specify the user interaction level for MSI. Specify the web location from which the application can be retrieved. Specify which MSI components will be installed. Specify what will be reinstalled. Specify whether Windows Installer packages are installed from the managed device's local Windows Installer cache, or a distribution location. Specify the arguments to include in the MSI command line for uninstall operations. This section contains all configuration settings relating to postponement of packages on managed devices. Specify when the ManageSoft client should ask about whether to postpone actions on manadatory packages. Specify the command used to perform control postponement of packages on managed devices. Specify the full path to the command line used to control postponement of packages on managed devices. This section contains all configuration settings relating to prerequisite package. Specify whether ManageSoft retains installation preferences set by a top-level or pre-requisite package. Specify whether ManageSoft should reinstall the base package if the prerequisite package has changed for Third party installer packages. This section contains all configuration settings relating to reboot. Specify the default response to dialogs that prompt the user to allow a reboot. Specify whether ManageSoft reboots the managed device if the package being installed requires it, even if the machine is locked. Specify whether ManageSoft reboot events wait for the machine to become unlocked before proceeding with a reboot Specify whether ManageSoft reboots the managed device if it is a server. This setting is only used by the adoption agent Specify whether ManageSoft displays a warning to the user before performing any reboot required by a package installation. Specify whether ManageSoft forces reboot if the package being installed requires it. This setting suppresses any user interaction required to close other applications that may be running. Specify whether ManageSoft performs a forced reboot if the machine is locked. Specify the default response to dialogs displayed during security patch installation that prompt the user to allow a reboot. Specify the command used to perform reboot on the managed devices. Specify the full path to the command line used to reboot managed devices. Specify the command to be run before a ManageSoft requested reboot occurs. Specify whether to proceed with the requested reboot, if the pre reboot command returns a non zero exit code. Specify the command to be run after a ManageSoft requested reboot occurs. Specify the number of times the user is prompted to reboot. The user is given the option to reboot or postpone, until these cycles are complete. Specify the length of reboot prompt cycles, in seconds. When set to true, this is equivalent to an infinite number of "reboot prompt cycles". "Force the reboot dialog to be the top window during the final stage of user prompting." "Displays a Shutdown button to users on the reboot dialog as well as the Reboot button." This section contains all configuration settings relating to security. Specify whether executable files downloaded by ManageSoft are checked for a valid Authenticode digital signatures before being installed. Specify whether Authenticode digital signatures are checked in the ManageSoft catalog (.ndc) file before packages are installed. Specify whether ManageSoft has access to Common folders on Windows NT 4.0/2000/XP. Specify whether ManageSoft has access to Windows NT/2000/XP private user folders and files. Specify whether ManageSoft prompts the user before installing a package when Authenticode signatures are valid. Specify whether the subsequent behavior after ManageSoft encounters an invalid signature when performing an Authenticate check. This section contains all configuration settings relating to self-heal. Specify whether ManageSoft performs self-healing on registry keys and preference files. Specify whether ManageSoft re-registers COM objects during upgrades and self-heal operations. Specify whether ManageSoft performs a check on package-level MD5 digests during self-healing operations. Specify whether ManageSoft performs a check on file-level MD5 digests during self-healing operations. Specify whether ManageSoft requires a package version number change or if a change in the package-level MD5 digest is all that is required before a self-heal or upgrade of a package is performed. Specify whether self-healing should occur. True means that all packages on this managed device should self-heal. False means that no packages on this managed device should self-heal. Any other value means that self-healing should be attempted only on packages with a custom property whose name matches the value of SelfHeal. Note: The custom property value is not used, but it must have a non empty value to take effect. This section contains all configuration settings relating to trusted location. Specify whether the installation agent checks whether the distribution location from which a ManageSoft catalog is collected is a trusted location. This setting will be ignored if VerifyTrustOrSign is True. Specify whether trusted and excluded locations can only be changed by users with Administrator-level permissions. This section contains all configuration settings relating to uninstallation. Specify the string to uninstall an application. Specify whether redundant files should be handled during upgrades or downgrades. Specify whether the user confirmation dialog will be displayed during removal of InstallShield packages. This section contains all configuration settings relating to upgrade/downgrade. This section contains all configuration settings relating to installation agent user interaction. Specify the level of user interaction. Specify whether ManageSoft prompts the user before prerequisite packages are installed. Specify whether ManageSoft prompts the user before installing a package. Specify whether ManageSoft informs the user when package installation is complete. Specify whether ManageSoft informs the user when package installation is complete. Specify whether ManageSoft informs the user when package uninstallation is complete. Specify whether ManageSoft prompts the user if it fails to register a COM server. Specify whether the ManageSoft user interface is hidden if no user interaction is necessary. Specify whether ManageSoft displays an icon in the system tray. Specify whether ManageSoft displays a dialog when removing a file. Specify the number of seconds that installaton agent dialogs display before timing out. Specify the number of seconds that installaton agent dialogs can remain hidden while waiting to time out, before being reshown to the user. Specify whether ManageSoft informs the user when package uninstallation is complete. Specify whether end-users on managed devices are interactively asked if they want to postpone the installation. This section contains all configuration settings relating to virus scanning. Specify whether files downloaded by ManageSoft are scanned for viruses before installation. Specify the command used to perform virus scanning. This section contains all configuration settings relating to inventory agent. Specify whether ManageSoft should create inventory event logs. Specify whether the inventory file should be compressed. Specify the contents of wmitrack.ini Specify whether ManageSoft should perform its normal network checks. Specify the location for user inventories on the managed device. Specify the location for machine inventories. Specify the date/time format for all inventory agent activity. Specify whether to permit execution of console mode applications on locked down Windows 9X desktops for zero-touch hardware inventory collection. Specify the file name of a local copy of the inventory file. Specify the minimum interval (in hours) between collections of inventory. Specify the number of directory levels to search at initialization to approximate the number of directories searched during tracking. Specify the command line for non-WMI hardware inventory collection. This section contains all configuration settings relating to differential inventory. Specify whether differential inventories are performed on the managed device. Specify the number of differential inventories performed between full inventories. Specify the differences that ManageSoft will collect when differential inventories are performed. This section contains all configuration settings relating to inventory agent logging. Specify the name of the file to store logging information. Specify the name of the file to store additional logging information. Specify the maximum log file size. Specify the logging level for the inventory agent. This section contains all configuration settings relating to inventory agent scanning options. Specify the folders to include in inventory. Specify the file extensions to include in inventory. Specify whether to track files in user inventories. Specify whether to track hardware inventory when generating user inventory. Specify whether information about MSI packages is included in inventories. Specify which files should be scanned during a ManageSoft inventory. The value should be an octal mask for file permissions in the format used by the chmod command. Specify whether information about platform-specific packages (for example lpp, pkg, rpm and sd-ux) is included in inventories. Specify whether to track hardware inventory when generating machine inventory. Specify the folders to execute from inventory. Specify the file extensions to exclude from inventory. Specify the files to exclude from inventory. Specify the MD5 for files that are excluded from inventory. Specify whether to generate MD5 checksums for files that are reported in inventory. Specify the files to be included in inventory. Specify MD5 for files to include in inventory. Specify the registry keys or values to be include in the inventory. Specify whether child folders are included in inventory. Specify whether file version header information is included in inventory. Specify whether WMI tracking is specified as the prefered option for tracking hardware. Specify whether to conduct computer inventory of hardware and all user packages. Specify whether to conduct user inventory. Specify whether information about ManageSoft packages is included in inventories. Specify the scripts to run during machine inventory Specify whether to execute any custom inventory scripts found by plugins Location of inventory scripts on the client This section contains all configuration settings relating to inventory agent user interaction. Specify whether ManageSoft displays an icon in the system tray. Specify the level of user interaction. This section contains all configuration settings relating to net selector agent. Specify the algorithm(s) used to determine distribution servers priorities. Specify the highest upload/download priority that can be assigned to a distribution server. Specify the lowest upload/download priority that can be assigned to a distribution server. This section contains all configuration settings relating to the peer to peer download service. Name of the pipe used to communicate with the ManageSoft Download Service. This should be changed only for internal testing purposes. Name of the directory (usually within $(CommonAppDataFolder)) where the ManageSoft Download Service will store files. This should be changed only for internal testing purposes. Name of the file (in the same directory as the peer cache) where the ManageSoft Download Service will store its file catalog. This should be changed only for internal testing purposes. Number of seconds between checkpoints of the ManageSoft Download Service files catalog. Minimum free disk space to maintain on drive holding peer cache. UDP port for Peer to Peer search operations. Must not be firewalled. TCP port for Peer to Peer file pull operations. Must not be firewalled. TCP incoming connection queue length for Peer to Peer file pull operations. Number of seconds the ManageSoft Download service will spend searching peers for a file before deciding to download from a distribution location instead. Time (in tenths of a second) between each search request sent by the ManageSoft Download Service while searching peers for a file. Minimum number of UDP search requests that the ManageSoft Download Service will issue for a file even if it receives pull offers. This setting allows receiving a push operation or multiple offers even if some search request packets get dropped. Number of seconds after a failed peer search request before the ManageSoft Download Service will search for the same file. When searching, offers to send the file might be received from more than one peer. This can help distribute load and reduce file transfer failures, but waiting for more offers can make searching take longer. Support direct file push in response to a search request. Push operations allow reductions in UDP search traffic, but can occur on any port, which doesn’t work to hosts running a firewall. Firewalled hosts, or hosts in networks where most peers are firewalled, should turn this off. How many peer search and transfer operations may be allowed simultaneously Maximum averaged rate of all transfers to and from peers Averaging period for transfers to/from peers Maximum averaged rate of all peer-to-peer disk transfers (reads and writes) Averaging period for transfers to/from disk Transfers from a DL will be aborted if they stall for this many seconds How many times a failed WAN download is retried immediately at each WAN retry interval How long to wait before retrying a failed WAN download How long to allow a file to continue to be retried since it was last requested How often to send WAN download progress announcements to peers on LAN How recently we must have done a peer search before we will start a download from a distribution server Maximum averaged rate of all transfers from distribution servers Averaging period for transfers from distribution servers Maximum number of concurrent transfers from distribution servers Period over which garbage collector should crawl entire file catalog Minimum time garbage collector should pause between examining files Maximum time garbage collector should pause between examining files Maximum percentage of available disk usage that will be used for checking consistency of peer cache Files will be deleted from the peer cache if they are not used for more than this interval How long to wait after receiving the first request before starting to look for and delete unused files This section contains all configuration settings relating to policy agent. Specify the numerical priority (or "invalid") to be assigned to the location from which policy (.NPL) files were obtained, when using it as a location for downloading packages. This section contains all configuration settings relating to policy client merging. Specify the minimum network speed (in bits per second) between the managed device and the domain controller that is required to apply policy. This setting only applies for client-side policy merging when AutoDetectDC is set to False. Specify how ManageSoft selects a domain controller for client side policy merging. Specify whether managed devices will report policy compliance. Note: This setting should not be changed from the default value of False as policy compliance logs are not currently imported by Deployment Manager. Specify the location where policy is generated. Specify if fail over to server side policy merging should happen or not. Specify whether bypassing package-level filtering is allowed during a policy merge if filtering is not required. Specify the installation agent command line options to pass to ManageSoft when applying policy information. Specify whether to use the locally cached copy of policy if a new policy cannot be generated. The policy with which this managed device is bootstrapped when using a specific policy instead of determining its own. This value will always be used as the location to retrieve machine policy from when specified. An example policy preference is $(DownloadRootURL)/Policies/Merged/MANAGESOFT_domain/Machine/Marketing.npl. The command to execute to perform an application of machine policy on the managed device. The command to execute to perform an application of user policy on the managed device. Specifies whether the Group Policy Client Side Extension should be executed. Specify whether ManageSoft will attempt to retrieve ManageSoft policy when the managed device boots, if no machine schedule exists on managed device. Specify the command used to retrieve policy if RetryPolicy is set to true. This section contains all configuration settings relating to policy client merging locations. Specify the location in which to save the current machine policy. Specify the location where package information associated with machine policy is cached. Specify the location in which to save active user policies. Specify the location where package information associated with user policy is cached. This section contains all configuration settings relating to policy agent logging. Specify the name of the file to store logging information. Specify the name of the file to store additional logging information. Specify the maximum log file size. Specify the logging level for the policy agent. This section contains all configuration settings relating to schedule agent. Specify whether ManageSoft should create schedule event logs. Specify when system startup or logon triggers run. Specify the type of network that will trigger "When connected to network" event. Specify the number of seconds for which ManageSoft user schedules remain disabled. Specify the types of events that are set to execute only when the network is available and to identify the type of network to look for. Specify the type of scheduler to use. Specify whether ManageSoft should apply computer policy while a user is logged on. This section contains all configuration settings relating to schedule agent logging. Specify the level of logging used by schedule agent. Specify the name of the file to store logging information. Specify the name of the file to store additional logging information. Specify the maximum log file size. This section contains all configuration settings relating to selector. Specify the template command line to be used to install an application package through the ManageSoft package selection agent. Specify the template command line to be used to uninstall an application package through the ManageSoft package selection agent. Specify the template command line to be used to verify/repair an application package through the ManageSoft package selection agent. Specify the name of the configuration file used by the ManageSoft user interface on managed devices. Specify the name of the default configuration file used by the ManageSoft user interface on managed devices. Specify the locale setting used by the selector. Specify the default locale setting used by the selector. Specify the number of minutes between automatic refresh of data displayed by the ManageSoft user interface on a managed device. This section contains all configuration settings relating to selector logging. Specify the name of the file to store logging information. Specify the name of the file to store additional logging information. Specify the maximum log file size. Specify the level of logging used by selector. This section contains all configuration settings relating to upload agent. Specify the location where ManageSoft uploads logging files from the managed device. Specify the location where ManageSoft uploads inventory files. Specify the location where ManageSoft uploads policy compliance log files from the managed device. Specify whether ManageSoft should upload inventory files immediately after generation. Specify whether the uploaded files should be removed from the source location after successful upload Specify the type of files uploaded. Specify whether to upload machine or user generated files. Specify the file or files to be uploaded via the upload agent. This section contains all configuration settings relating to upload agent logging. Specify the level of logging used by upload agent. Specify the name of the file to store logging information. Specify the name of the file to store additional logging information. Specify the maximum log file size. This section contains all configuration settings relating to bandwidth settings. Specify the maximum percentage of bandwidth that ManageSoft uses for uploads on a high-speed connection. Specify the minimum network speed (bits per second) for ManageSoft to initiate a check for updates. Specify the bytes per second at which the managed device uploads data over the network. This setting is not used if the NetworkSpeed setting can be determined and the NetworkHighSpeed is set to a non-zero value. Specify the lowest network speed (in bits per second) that Managesoft will consider to be a high speed network connection to a server. Specify the maximum Network High Usage value that can be set for a managed device by end-user moving the bandwidth usage slider control in the installation agent. Specify the maximum percentage of bandwidth that ManageSoft uses for uploads on a low-speed connection. Specify the length of time in seconds of inactivity after which a network operation will time out. Specify the minimum NetworkLowUsage value that can be set for a managed device by and end-user moving the bandwidth usage slider control in the installation agent. Specify whether ManageSoft should perform its normal network checks. This section contains all configuration settings relating to security management agent. Specify the naming conventions for uploaded files containing security analysis details. Specify the naming conventions for uploaded security event logs. Specify installable package types separated by semi-colon (;). Specify whether to perform security compliance checking. Name of the pipe used to communicate with the ManageSoft Security Service. This should be changed only for internal testing purposes. Specifies whether the ManageSoft Security management agent performs security analysis based on data in mssecure.xml. The path to the folder in which the security analysis (.msa) files are stored locally. Members of these groups may override security policies on managed devices. Separate multiple group names with semicolons. Specifies how often, in minutes, the security agent will cache already-recorded user session data. The default value of zero disables this caching. When enabled, this is typically set to values between 60 (1 hour) and 240 (4 hours). Specifies how often, in minutes, the security agent will generate security log files for upload. The default value of zero disables security log generation. When enabled, this is typically set to values between 1440 (24 hours) and 10080 (7 days). Specify whether ManageSoft should perform its normal network checks. This section contains all configuration settings relating to security patch management. Specify the location of convert.exe. Specify the location of inventory.exe. Specify the command line to check security compliance using MBSA 1.2. Specify the installation folder of MBSA 1.2. Specify the location of downloaded mssecure.xml file. Specify the command line to check security compliance using MBSA 2.0. Specify the installation folder of MBSA 2.0. Specify the location of downloaded wsusscan.cab file. Specify the command line to check for vulnerabilities using MBSA. This section contains all configuration settings relating to malware threats. Specify scan type(i.e Full or Quick). Specify whether to scan all malware or matching a certain criteria Specify if the severity rating should be used Specify the minimum severity rating to scan for. Specify whether scan should be done based on categories Specify the categories to scan for Specify whether to apply exceptions when scanning Specify the applications that doesn't need to be scanned Specify the action that we need to take when a malware infection is detected Specify whether the infection should be removed after a period of time Specify the number of days after which the quarantined items needs to be removed Force the reboot or prompt the user If force reboot is not set and this is set to true then wait for the specified period before reboot. If force reboot is not set and the user is not logged on then reboot automatically. If this is set to false then wait for the specified period before reboot. The period to wait before a reboot is done if the force reboot is off and reboot automatically if end-user doesn't respond is on Message shown before rebooting Specify whether to enable file system scanning Specify whether to enable Windows registry scanning Specify whether to enable cookies scanning Specify whether to enable memory scanning Specify whether to enable network drives scanning Specify whether to enable removable drives scanning Specify whether to enable fixed drives scanning Specify whether to enable RAMDisk drives scanning Specify whether to enable CDROM drives scanning Specify the folders to scan for. Multiple folders can be set, each delimited by | This section contains all configuration settings relating to local device settings. Specify whether removable storage devices (USB, PCMCIA etc.) are enabled or disabled Specify whether serial ports are enabled or disabled Specify whether parallel ports are enabled or disabled Specify whether floppy disk drives are enabled or disabled Specify whether CD/DVD drives are enabled or disabled Specify whether WiFi 802.11x devices are enabled or disabled Specify whether Bluetooth devices are enabled or disabled Specify whether Infrared devices are enabled or disabled Specify whether modems are enabled or disabled Specify whether all PCMCIA cards are enabled or disabled Specify whether all firewire ports are enabled or disabled Force the reboot or prompt the user If force reboot is not set and this is set to true then wait for the specified period before reboot. If force reboot is not set and the user is not logged on then reboot automatically. If this is set to false then wait for the specified period before reboot. The period to wait before a reboot is done if the force reboot is off and reboot automatically if end-user doesn't respond is on Message shown before rebooting The maximum amount of time (in minutes) to to wait for a device to respond to a management request. This section contains all configuration settings relating to application blocking. Specify the list of applications that should be blocked from running. Specify whether the user should be notified that an application has been blocked from running. Specify whether users with local administrator privileges should be included in application blocking. Specify the message that should be displayed when an application is blocked from running. This section contains all configuration settings relating to vulnerabilities. Specify the scripts to run during a vulnerability scan Specify the location for storing vulnerability scripts Specify whether to execute any custom vulnerability scripts found by plugins This section contains all configuration settings relating to security management agent logging. Specify the name of the file to store logging information. Specify the name of the file to store additional logging information. Specify the maximum log file size. Specify the level of logging used by the security agent. This section contains all configuration settings relating to security service. Specify whether the security service event log file should be compressed. Whether to enable the security service's internal upload. If this is disabled, the schedule agent can still perform uploads. This section contains all configuration settings relating to security service logging. Specify the name of the file to store logging information. Specify the name of the file to store additional logging information. Specify the maximum log file size. Specify the level of logging used by security service.